samba - Jan 2019 - dns_tkey_gssnegotiate: TKEY is unacceptable

Call me dense, but now I am more confused. I have tried with and without quotes
... all over the place (i.e. in the smb.config and on the command line) and
everything still results in errors, although not always exactly the same.
Messing with the command line results in things like this:
ERROR(runtime): uncaught exception - (9711,
'WERR_DNS_ERROR_RECORD_ALREADY_EXISTS')
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 177, in _run
    return self.run(*args, **kwargs)
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/dns.py",
line 945, in run
    raise e

I have spent aeons reading man pages, the Wiki etc., but this one is not
"obvious" to me

    On Monday, January 7, 2019 3:24 PM, Rowland Penny via samba <samba at
lists.samba.org> wrote:
 

 >  On reboot, systemctl status checks for system, samba-ad-dc and
bind9
> are all without error, but still get same result for the
> samba_dnsupdate --verbose --all-names command. 
Ah, yes, if you think about it, the answer is obvious ;-)

Have you thought about it ?

And have you thought 'How about if I add '--use-samba-tool' to the
command ?

On Mon, 7 Jan 2019 22:12:48 +0000 (UTC)
Billy Bob <billysbobs at yahoo.com> wrote:
>  Call me dense, 
OK, if you insist, you are dense ;-)
>but now I am more confused. I have tried with and
> without quotes ... all over the place (i.e. in the smb.config and on
> the command line) and everything still results in errors, although
> not always exactly the same. Messing with the command line results in
> things like this: ERROR(runtime): uncaught exception - (9711,
> 'WERR_DNS_ERROR_RECORD_ALREADY_EXISTS') File
You can stop worrying, that is a glitch in the python code, it is
throwing an error when it should be returning a message similar to:

Not adding record, it already exists

Rowland

Okay, because you are not wrong ...
One more time before I move forward with this.
The smb.conf is now:

# Global parameters
[global]
        bind interfaces only = Yes
        interfaces = lo eno1
        netbios name = DC01
        realm = CORP.<DOMAIN>.COM
        server role = active directory domain controller
        server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
        workgroup = CORP
        idmap_ldb:use rfc2307 = yes
        dns update command = /usr/local/samba/sbin/samba_dnsupdate
--use-samba-tool[netlogon]
        path = /usr/local/samba/var/locks/sysvol/corp.<DOMAIN>.com/scripts
        read only = No[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = No


Running:

# samba_dnsupdate --use-samba-tool --verbose --all-names

returns:

IPs: ['172.20.10.130']
force update: A dc01.corp.<DOMAIN>.com 172.20.10.130
 * * * * *
force update: SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.corp.<DOMAIN>.com
dc01.corp.<DOMAIN>.com 389
29 DNS updates and 0 DNS deletes needed
Successfully obtained Kerberos ticket to DNS/dc01.corp.<DOMAIN>.com as
DC01$
update (samba-tool): A dc01.corp.<DOMAIN>.com 172.20.10.130
Calling samba-tool dns for A dc01.corp.<DOMAIN>.com 172.20.10.130 (add)
Calling samba-tool dns add -k no -P ['172.20.10.130',
'corp.<DOMAIN>.com', 'dc01', 'A',
'172.20.10.130']
ERROR(runtime): uncaught exception - (9711,
'WERR_DNS_ERROR_RECORD_ALREADY_EXISTS')
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py",
line 177, in _run
    return self.run(*args, **kwargs)
  File
"/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/dns.py",
line 945, in run
    raise e
Failed 'samba-tool dns' based update of A dc01.corp.<DOMAIN>.com
172.20.10.130
 * * * * *
Failed update of 29 entries

... and we are all good with that?

Assuming (perhaps densely) that we are, I wanted to just say thank you, but not
just for today. I have watched you in here like a stalker for months, and you do
good things for many people. :)
 

    On Monday, January 7, 2019 4:43 PM, Rowland Penny via samba <samba at
lists.samba.org> wrote:
 

 On Mon, 7 Jan 2019 22:12:48 +0000 (UTC)
Billy Bob <billysbobs at yahoo.com> wrote:
>  Call me dense, 
OK, if you insist, you are dense ;-)

>but now I am more confused. I have tried with and
> without quotes ... all over the place (i.e. in the smb.config and on
> the command line) and everything still results in errors, although
> not always exactly the same. Messing with the command line results in
> things like this: ERROR(runtime): uncaught exception - (9711,
> 'WERR_DNS_ERROR_RECORD_ALREADY_EXISTS') File
You can stop worrying, that is a glitch in the python code, it is
throwing an error when it should be returning a message similar to:

Not adding record, it already exists

Rowland



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba